fix(deps): update osv-scanner minor

renovate-bot commented 4 weeks ago

This PR contains the following updates:

Package	Change	Type	Update
github.com/CycloneDX/cyclonedx-go	`v0.8.0` -> `v0.9.0`	require	minor
github.com/charmbracelet/bubbletea	`v0.26.3` -> `v0.26.4`	require	patch
golang.org/x/exp	`4c93da0` -> `fc45aab`	require	digest
golang.org/x/mod	`v0.17.0` -> `v0.18.0`	require	minor
golang.org/x/term	`v0.20.0` -> `v0.21.0`	require	minor

Release Notes

CycloneDX/cyclonedx-go (github.com/CycloneDX/cyclonedx-go)

### [`v0.9.0`](https://togithub.com/CycloneDX/cyclonedx-go/releases/tag/v0.9.0) [Compare Source](https://togithub.com/CycloneDX/cyclonedx-go/compare/v0.8.0...v0.9.0) #### Changelog ##### Features - [`729c284`](https://togithub.com/CycloneDX/cyclonedx-go/commit/729c284798ebe341ced210b661362f77d68cd655): feat: Add CycloneDX 1.6 fields swhid and omniborId ([@snyk-tim](https://togithub.com/snyk-tim)) - [`b5d3595`](https://togithub.com/CycloneDX/cyclonedx-go/commit/b5d35959767efce95f50e96bf752c47fbe374496): feat: add manufacturer and authors ([@snyk-tim](https://togithub.com/snyk-tim)) - [`c52e698`](https://togithub.com/CycloneDX/cyclonedx-go/commit/c52e698d2fe3fbd60df6ff397f44e7b0ea15a4bc): feat: raise baseline go version to 1.20 ([@nscuro](https://togithub.com/nscuro)) ##### Fixes - [`9166e10`](https://togithub.com/CycloneDX/cyclonedx-go/commit/9166e10fdecaadd8a97ceed9636261d351d90a65): fix: `ioutil` -> `io` ([@nscuro](https://togithub.com/nscuro)) - [`349fc8c`](https://togithub.com/CycloneDX/cyclonedx-go/commit/349fc8cd072e90d81c0328f1d9dab16aa30fcf60): fix: add bom-ref to OrganizationalEntity/Contact ([@snyk-tim](https://togithub.com/snyk-tim)) - [`c97da90`](https://togithub.com/CycloneDX/cyclonedx-go/commit/c97da90e259e0051e02e07300c75ad5e37a0311b): fix: handle breaking changes in skywalking-eyes ([@nscuro](https://togithub.com/nscuro)) ##### Building and Packaging - [`ec6291e`](https://togithub.com/CycloneDX/cyclonedx-go/commit/ec6291e9ce9efbbb5d0010de4d8668fcbd05d148): build(deps): bump actions/checkout from 4.1.1 to 4.1.5 ([@dependabot](https://togithub.com/dependabot)\[bot]) - [`899fe39`](https://togithub.com/CycloneDX/cyclonedx-go/commit/899fe391ca4d756f1d5ba84478d3bc8795003cba): build(deps): bump actions/checkout from 4.1.5 to 4.1.6 ([@dependabot](https://togithub.com/dependabot)\[bot]) - [`8674ed5`](https://togithub.com/CycloneDX/cyclonedx-go/commit/8674ed5ecc38b65e03908b5a74308c95039068a9): build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 ([@dependabot](https://togithub.com/dependabot)\[bot]) - [`db3a114`](https://togithub.com/CycloneDX/cyclonedx-go/commit/db3a1144a2ce30b85e5985d2755fa3e4a81c5ca8): build(deps): bump apache/skywalking-eyes from 0.4.0 to 0.6.0 ([@dependabot](https://togithub.com/dependabot)\[bot]) - [`a3bd055`](https://togithub.com/CycloneDX/cyclonedx-go/commit/a3bd05518575f14d917685a02c689f81eedaad5c): build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 ([@dependabot](https://togithub.com/dependabot)\[bot]) - [`1179dd9`](https://togithub.com/CycloneDX/cyclonedx-go/commit/1179dd9051112c3b44a6cc577964c7d501a7258b): build(deps): bump gitpod/workspace-go from `8b9a0f6` to `8d15123` ([@dependabot](https://togithub.com/dependabot)\[bot]) - [`d98494e`](https://togithub.com/CycloneDX/cyclonedx-go/commit/d98494ea11dbb6550705d46d2473aa2a4a18e642): build(deps): bump gitpod/workspace-go from `9118b93` to `8b9a0f6` ([@dependabot](https://togithub.com/dependabot)\[bot]) - [`1e2a3a0`](https://togithub.com/CycloneDX/cyclonedx-go/commit/1e2a3a09e86d720729a3ab7ec55ed3ffa75164a5): build(deps): bump gitpod/workspace-go from `94ae638` to `9118b93` ([@dependabot](https://togithub.com/dependabot)\[bot]) - [`d4d6e35`](https://togithub.com/CycloneDX/cyclonedx-go/commit/d4d6e35fcfb08d14589b4a693aac3f28978b640b): build(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 ([@dependabot](https://togithub.com/dependabot)\[bot]) - [`521d1ce`](https://togithub.com/CycloneDX/cyclonedx-go/commit/521d1ce7b555013f2b78d8c4a21954815863ab44): build(deps): bump golangci/golangci-lint-action from 4.0.0 to 6.0.1 ([@dependabot](https://togithub.com/dependabot)\[bot]) - [`f1ebafe`](https://togithub.com/CycloneDX/cyclonedx-go/commit/f1ebafe5e2d2af3a3d551eb23c583a93b7ebccbf): build(deps): bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 ([@dependabot](https://togithub.com/dependabot)\[bot]) ##### Others - [`16d2143`](https://togithub.com/CycloneDX/cyclonedx-go/commit/16d2143b3d74b77af8a309b331e1bc46a445f495): Fix(1.6): Added missing omitempty in NistQuantumSecurityLevel ([@Petzys](https://togithub.com/Petzys)) - [`ffec473`](https://togithub.com/CycloneDX/cyclonedx-go/commit/ffec473428073e1266169e97c1c64de95e89981b): chore: add license header ([@mcombuechen](https://togithub.com/mcombuechen)) - [`1f8fdcc`](https://togithub.com/CycloneDX/cyclonedx-go/commit/1f8fdcc0047611a8baacfcd214c5ba3821fefd51): feat(1.6): add BOM.Declarations ([@mcombuechen](https://togithub.com/mcombuechen)) - [`62b5342`](https://togithub.com/CycloneDX/cyclonedx-go/commit/62b53429289d6cc6884b111256588150e3fed308): feat(1.6): add BOM.Definitions ([@mcombuechen](https://togithub.com/mcombuechen)) - [`c33b9cb`](https://togithub.com/CycloneDX/cyclonedx-go/commit/c33b9cb58eaa14e89740182fbde2a0cc888bc457): feat(1.6): add CBOM types ([@Petzys](https://togithub.com/Petzys)) - [`10e10c8`](https://togithub.com/CycloneDX/cyclonedx-go/commit/10e10c8bc8fcac6f90c914828786f11e404919b8): feat(1.6): add JSON schema, XML namespace ([@mcombuechen](https://togithub.com/mcombuechen)) - [`2dc599a`](https://togithub.com/CycloneDX/cyclonedx-go/commit/2dc599a8ad0f2be20e9bfc55ba75764758e6c7b8): feat(1.6): add License.Acknowledgement ([@mcombuechen](https://togithub.com/mcombuechen)) - [`7a32fde`](https://togithub.com/CycloneDX/cyclonedx-go/commit/7a32fde7e9e9e5fb44f8f8aafadd83a21ff82aaf): feat(1.6): add PostalAddress type ([@mcombuechen](https://togithub.com/mcombuechen)) - [`b8e4529`](https://togithub.com/CycloneDX/cyclonedx-go/commit/b8e4529773c3d12b172729567574ea6201231682): feat(1.6): add SpecVersion for v1.6 ([@mcombuechen](https://togithub.com/mcombuechen)) - [`c877828`](https://togithub.com/CycloneDX/cyclonedx-go/commit/c8778287f29dd21bff18a4f27f71f495de7b4991): feat(1.6): add environmentalConsiderations ([@mcombuechen](https://togithub.com/mcombuechen)) - [`e0e9c67`](https://togithub.com/CycloneDX/cyclonedx-go/commit/e0e9c670e1617adbdd147cff7cc0747769a4e723): feat(1.6): add schema definitions for CycloneDX 1.6 ([@mcombuechen](https://togithub.com/mcombuechen)) - [`b1636c2`](https://togithub.com/CycloneDX/cyclonedx-go/commit/b1636c2d6bb8aca4161402958a8d894aab7d66b5): feat(1.6): extend EvidenceOccurrence ([@mcombuechen](https://togithub.com/mcombuechen)) - [`b4b3b94`](https://togithub.com/CycloneDX/cyclonedx-go/commit/b4b3b94a60b1665c1d0492744032a9375ef751b1): fix(1.6): convert occurrences of OrganizationalEntity ([@mcombuechen](https://togithub.com/mcombuechen)) - [`9332ca6`](https://togithub.com/CycloneDX/cyclonedx-go/commit/9332ca660b772bc538b3c274ceb3d9f81caa0eb8): fix(1.6): fix json, xml labels on BOM.Definitions ([@mcombuechen](https://togithub.com/mcombuechen))

charmbracelet/bubbletea (github.com/charmbracelet/bubbletea)

### [`v0.26.4`](https://togithub.com/charmbracelet/bubbletea/releases/tag/v0.26.4) [Compare Source](https://togithub.com/charmbracelet/bubbletea/compare/v0.26.3...v0.26.4) Fix panics! Using `program.SetWindowTitle` and others *may* panic if they were called before the program starts. Also note that `program.SetWindowTitle` is now deprecated. To set the window title use [`tea.SetWindowTitle`](https://pkg.go.dev/github.com/charmbracelet/bubbletea@v0.26.4#SetWindowTitle) command. #### What's Changed - chore(deps): bump github.com/charmbracelet/x/ansi from 0.1.1 to 0.1.2 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/charmbracelet/bubbletea/pull/1026](https://togithub.com/charmbracelet/bubbletea/pull/1026) - chore(deps): bump github.com/charmbracelet/lipgloss from 0.10.0 to 0.11.0 in /examples by [@dependabot](https://togithub.com/dependabot) in [https://github.com/charmbracelet/bubbletea/pull/1025](https://togithub.com/charmbracelet/bubbletea/pull/1025) - fix: program renderer commands by [@aymanbagabas](https://togithub.com/aymanbagabas) in [https://github.com/charmbracelet/bubbletea/pull/1030](https://togithub.com/charmbracelet/bubbletea/pull/1030) **Full Changelog**: https://github.com/charmbracelet/bubbletea/compare/v0.26.3...v0.26.4 ***

Thoughts? Questions? We love hearing from you. Feel free to reach out on [Twitter](https://twitter.com/charmcli), [The Fediverse](https://mastodon.social/@charmcli), or [Discord](https://charm.sh/chat).

Configuration

📅 Schedule: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

codecov-commenter commented 4 weeks ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 65.15%. Comparing base (b1b8bfa) to head (73511f7).

Additional details and impacted files

```diff @@ Coverage Diff @@ ## main #1017 +/- ## ======================================= Coverage 65.15% 65.15% ======================================= Files 149 149 Lines 12338 12338 ======================================= Hits 8039 8039 Misses 3848 3848 Partials 451 451 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

forking-renovate[bot] commented 3 weeks ago

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

6 additional dependencies were updated

Details:	Package	Change
`github.com/charmbracelet/x/ansi`	`v0.1.1` -> `v0.1.2`
`golang.org/x/crypto`	`v0.23.0` -> `v0.24.0`
`golang.org/x/net`	`v0.25.0` -> `v0.26.0`
`golang.org/x/sys`	`v0.20.0` -> `v0.21.0`
`golang.org/x/text`	`v0.15.0` -> `v0.16.0`
`golang.org/x/tools`	`v0.21.0` -> `v0.22.0`

google / osv-scanner